$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: pu1j4VXeNeU4LpQWIGga8qqsW2c57Vl7ntLE/g42kW4= Subject key identifier: 8D:37:84:10:3E:2F:A4:89:1C:C9:F8:6E:CB:0C:EB:03:5E:7A:76:3C Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 0193512BCB9B838DDC029E77FDF6FFF288C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 0ED1 Signing time: Fri 22 Nov 2024 00:00:44 +0000 Manifest this update: Fri 22 Nov 2024 00:00:44 +0000 Manifest next update: Sat 23 Nov 2024 00:00:44 +0000 Files and hashes: 1: 7mBmdZYhLRK3CbJ8iIFkXvxiqZA.roa (hash: 4whwPjY/qjVPi+kU3i2it7lpvkw8OKSRpXv/KyRz0Ds=) 2: 8QkjgzgeVZegs7M6TQbWRJpXI4o.roa (hash: pM8vKnjaY6FWpRIQ2pxqzvLwmG8U81Y80Cb7Tqcvm0o=) 3: D3cnJYgHiz3oATcqythmTADk_HA.roa (hash: nQjAX4n3hja2RivKs/G0pz3cOTzjI4f4JsUnXySukLA=) 4: DSmY0digd3_FMEq48nMrPJa48hI.roa (hash: XKLtrnLtXo1sfPOPYRn7KQDcQoQP2vZrpLaDum1d4NE=) 5: F1Gfcfjyn5NtrW8N2nl0lrEiVwA.roa (hash: tEkKanTPswZxMWVrUr3AtbCmKfmTa0++9Le5Cv4elL0=) 6: GMF4_uBkLgbBDjB9eiE_AdkatHA.roa (hash: rLGc+YiIecb4TJATSjC6VhRK0tbRo+MHUH/OsVEgCl0=) 7: IUdvhvnaWQ61qInacdHfr4qjoDM.roa (hash: TbJyYO51UqlMC4crxBw07Hy9CU5fJHQfxzhzr4Q3JdE=) 8: MeJ4UXxcQeItxJ6ME72FxSluHw8.roa (hash: fu/zTerPVrXaF2lc5Lycn6MeCbUF3ZFeQorxrC+Et/M=) 9: UQnIrI6qnZeM8pebhX6H6GiAOhw.roa (hash: vzjOah1aEKMTTLk/uUIli7W9e7bQd33/DqS8oiFFARo=) 10: UhBfgbsruDJdKqOuO5rsEadsJoI.roa (hash: edQsm/QIBfuBP0ECEwZcgIGds8HQ4/pkfYM/Q/M4iCg=) 11: Y2etQywV7677Wd-v3xiYLS0vNy8.roa (hash: QXZ5U2dJXz7ehjY1MzJ5qw3xmL/gWLPBNAH8Felq5CQ=) 12: _5u63omjn-3Ep5zGtCUSp_YfCZ0.roa (hash: BVDKzXj9olir1TmPExODg0fGUN9CdvOxpShgLN+H5A4=) 13: _rpAJVBCeX-BxKyW1zjUfjNmK0s.roa (hash: 7mVwVc/DpVfYA3WQtY3LfYjxaxVUA+XqggaxBVEmrS0=) 14: dgo2Bo5xfvUtvecRZOOBIXY94-Q.roa (hash: uVhSQbehsTB2B/eM7hJpM7b3VC21dPnDix/7zG65XoM=) 15: jgUtYxCNBzme_hf7ORI1H6od-NQ.roa (hash: MuVeLc6m0Ekw9RZUH5Ex+TmrvIngAziiWX6WduSiNSE=) 16: nvGeOxwynUCZLOGEdyyvB9oinoA.roa (hash: mpkKc0dKd3LorLj9mkkjtZ3YbGLbJF8TGTXmQ9e7wsk=) 17: thtWTNLO2qPb7usv4Vg_0xbrH08.roa (hash: u1hL8o3fdnzfL/M6JIQxV6fHCwpuq5fwZbN1/NvvMNk=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: ZIL945cLG+nGqnXkTslVbQ1ISUE3R/vsoJGMMDIJj80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:cb:9b:83:8d:dc:02:9e:77:fd:f6:ff:f2:88:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Nov 22 00:00:44 2024 GMT Not After : Nov 23 00:00:44 2024 GMT Subject: CN=8d3784103e2fa4891cc9f86ecb0ceb035e7a763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:dd:ab:2c:51:a1:cc:64:95:d9:f5:07:31: 94:0d:4c:f5:5e:1d:52:a0:f1:f4:a4:cb:ea:55:29: 31:4e:bb:0a:a5:05:3b:5f:ca:1c:32:84:69:64:91: b4:21:a2:fa:e7:0f:31:f2:16:60:4f:3c:eb:9c:4b: 62:81:e0:5f:55:65:2c:bd:69:78:91:9e:b7:2c:2d: be:86:7a:dd:99:cd:77:29:cd:9f:c7:8e:d4:14:e7: 7b:29:d1:96:7d:2d:35:e3:ad:58:a1:84:02:df:7b: 0b:0b:49:b7:03:80:d8:88:4d:50:d4:c7:02:2c:c4: 82:48:f6:19:bd:20:96:0c:72:17:4e:85:2c:ff:09: f1:f4:61:f1:f8:3f:50:ba:c3:18:4b:1b:9e:33:17: c1:01:97:96:33:39:d7:d9:4c:b5:29:44:cc:e9:d2: e8:d1:24:cd:ea:da:2a:4d:26:3e:ac:70:b5:16:9c: 0b:34:9f:ac:a4:82:70:8d:c5:26:e8:f2:7b:d2:6a: 05:43:cb:fe:22:fe:04:3a:1d:25:d9:b5:af:35:6f: b5:f4:56:58:be:b4:8a:e4:5d:b5:da:3d:64:d6:53: 4b:5d:46:58:d8:00:a5:2f:fa:07:de:08:99:c0:c9: e5:fa:e6:c9:cc:f8:0c:8d:57:e9:8c:5a:f9:b2:c1: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:84:10:3E:2F:A4:89:1C:C9:F8:6E:CB:0C:EB:03:5E:7A:76:3C X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fc:c1:a8:8e:b6:4f:d1:f4:ae:df:e3:c8:9d:e4:b4:f9:b7: 93:85:67:9c:e9:cb:3b:6e:0b:97:1d:59:91:4b:06:45:c9:5c: 9e:68:74:03:fc:c6:74:35:70:2d:10:95:8f:c2:64:8b:90:6e: ff:7c:07:d5:f4:1e:f2:0c:cf:2c:9a:16:06:f7:78:23:00:32: 89:86:bf:ed:b8:13:77:46:ce:2b:3d:b4:24:af:f5:45:06:c4: 18:b4:c6:f1:9d:a0:6e:a3:11:06:13:35:c5:d2:d4:ca:3d:1f: 27:dd:e5:e5:9a:4d:fe:4e:5a:69:5a:20:25:5f:10:50:52:a1: 15:e9:ff:5f:08:68:d9:bc:ee:f2:27:f0:38:ab:8e:bd:52:9b: e7:86:a3:08:8c:9f:a1:14:88:b3:c7:ee:8b:05:de:94:76:93: 74:d4:4c:1f:50:8f:6a:ad:7d:ba:e3:19:eb:d3:d6:f1:08:e6: 35:89:61:dc:93:c0:55:5f:82:96:07:3a:6e:1c:ce:d1:21:12: ac:5b:5c:ce:71:10:95:3c:bc:df:25:e8:5c:77:4f:93:02:ea: 88:5e:81:24:71:b7:72:6f:16:c2:74:0a:36:1c:41:47:df:fd: 93:94:46:cb:ce:39:a8:ee:f9:c0:cc:0e:d1:15:15:e9:3f:1e: 83:71:1a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK8ubg43cAp53/fb/8ojHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjQxMTIyMDAwMDQ0WhcNMjQxMTIzMDAwMDQ0WjAzMTEwLwYDVQQD Eyg4ZDM3ODQxMDNlMmZhNDg5MWNjOWY4NmVjYjBjZWIwMzVlN2E3NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuozdqyxRocxkldn1BzGUDUz1Xh1S oPH0pMvqVSkxTrsKpQU7X8ocMoRpZJG0IaL65w8x8hZgTzzrnEtigeBfVWUsvWl4 kZ63LC2+hnrdmc13Kc2fx47UFOd7KdGWfS01461YoYQC33sLC0m3A4DYiE1Q1McC LMSCSPYZvSCWDHIXToUs/wnx9GHx+D9QusMYSxueMxfBAZeWMznX2Uy1KUTM6dLo 0STN6toqTSY+rHC1FpwLNJ+spIJwjcUm6PJ70moFQ8v+Iv4EOh0l2bWvNW+19FZY vrSK5F212j1k1lNLXUZY2AClL/oH3giZwMnl+ubJzPgMjVfpjFr5ssGSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI03hBA+L6SJHMn4bssM6wNeenY8MB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfzBqI62 T9H0rt/jyJ3ktPm3k4VnnOnLO24Llx1ZkUsGRclcnmh0A/zGdDVwLRCVj8Jki5Bu /3wH1fQe8gzPLJoWBvd4IwAyiYa/7bgTd0bOKz20JK/1RQbEGLTG8Z2gbqMRBhM1 xdLUyj0fJ93l5ZpN/k5aaVogJV8QUFKhFen/Xwho2bzu8ifwOKuOvVKb54ajCIyf oRSIs8fuiwXelHaTdNRMH1CPaq19uuMZ69PW8QjmNYlh3JPAVV+Clgc6bhzO0SES rFtcznEQlTy83yXoXHdPkwLqiF6BJHG3cm8WwnQKNhxBR9/9k5RGy845qO75wMwO 0RUV6T8eg3EakA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:32:50 2024 by rpki-client on console-ams.rpki-client.org